Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-8618

Опубликовано: 21 дек. 2015
Источник: redhat
CVSS2: 2.6
EPSS Низкий

Описание

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7golangNot affected
Red Hat Gluster Storage 3.1golangNot affected
Red Hat OpenShift Enterprise 3golangNot affected

Показывать по

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=1293448golang: Carry propagation in Int.Exp Montgomery code in math/big library

EPSS

Процентиль: 72%
0.00735
Низкий

2.6 Low

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

CVSS3: 7.5
nvd
около 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

CVSS3: 7.5
debian
около 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before ...

CVSS3: 7.5
github
больше 3 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

suse-cvrf
больше 9 лет назад

Security update for go

EPSS

Процентиль: 72%
0.00735
Низкий

2.6 Low

CVSS2